Privacy Policy

Effective date: August 15, 2026  |  Last updated: July 31, 2026  |  Version: 2.0

1. Who We Are

Homework Hub ("we", "us", "our") is a service operated by PM Advisory (an Ontario corporation), based in Ontario, Canada. Contact us at privacy@homeworkhub.app.

2. Who This Policy Covers

This policy applies to:

• Parents / guardians who register and manage a family account.
• Children whose homework activity is tracked through the parent's account.

Children do not create their own accounts. They are represented as named profiles within a parent's account. We collect only the minimum information needed to provide the service.

3. Information We Collect

3a. From Parents

• Email address — used for account login and service communications.
• Password — stored as a secure hash; never readable by us.
• Consent record — timestamp of when parental consent was given.
• Referral or invite code — if one was used to register (for referral attribution). Codes are optional; most families register without one.
• How you found us — if you arrived from an ad or a tagged link, we record the campaign tags on that link and the referring site (first visit only, stored in your own browser) and attach them when you register, so we know which of our campaigns work. This never involves third-party cookies and is never linked to your child's learning data.
• If you sign in with Google — Google shares your account email address and name with us, which we use only to create and operate your account (the name only to greet you, and you can edit it). We don't request or store anything else from your Google account — no contacts, no profile photo, no calendar.

3b. From Children's Profiles (entered by parent)

• First name or alias — we recommend using a nickname rather than a full legal name.
• Grade level — used to tailor question difficulty and curriculum.
• Homework schedule preferences — the subjects and active days chosen by the parent.
• Difficulty setting — a per-child level (e.g. relaxed, standard, or challenge) chosen by the parent.
• Optional PIN — a 4-digit PIN a parent may set so a child can confirm it before starting their homework session.

3c. Homework Activity

• Questions generated for each session.
• Answers submitted by the child and AI-generated feedback scores.
• Session timestamps (date, not precise time).

3d. What We Do NOT Collect — from your family's account or your child's activity

• Full legal names of children.
• Dates of birth.
• Photos or biometric data.
• Location data.
• Device identifiers or advertising IDs.
• Browsing history outside of Homework Hub.

Cookies on our public marketing pages (the pages you can visit without signing in) are separate, always optional, and described in Section 11.

4. How We Use Your Information

• To generate personalised homework questions at the correct grade level. Questions are generated automatically each week on a schedule, and also on demand when a parent requests a new set, using the AI provider described in Section 5b.
• To display progress history to the parent on the dashboard.
• To authenticate the parent and protect family data from other users.
• To view per-family operational data (such as number of sessions completed, average scores, and last active date) so the Homework Hub team can operate, support, and improve the service. This data is accessible only to the Homework Hub operator and is not used for advertising or profiling.
• To operate and improve the service.
• To respond to support or deletion requests.

We do not use your family's account data or your child's data for advertising or profiling, and we never sell personal information. We do not use children's data to train any AI model. (Optional cookies on our public marketing pages are covered in Section 11.)

5. Third-Party Service Providers

We use a small number of third-party services to operate Homework Hub. Each receives only the minimum data necessary for its job:

5a. Cloud database & hosting

Your family's learning data — profiles, questions, answers, progress — is stored with a major cloud provider in Canada (Toronto region), under contractual data-protection safeguards. The provider that hosts our website keeps standard server access logs (IP address, page requested, timestamp).

5b. AI question generation & marking

Practice questions and feedback are generated by an AI language-model provider. A request contains only your child's grade level, subject, curriculum region, difficulty setting, and the submitted answers — never your email address or account identifiers. Your child appears only as the first name or nickname on their profile — we recommend a nickname (such as "Alex") rather than their real name. Under the provider's standard API terms, submitted data is not used to train AI models.

5c. Email delivery

An email delivery provider receives your email address solely to deliver account emails (welcome, trial reminders, password resets). It does not use your data for advertising.

5d. Where processing happens

Your family's learning data lives in Canada. Some processing and supporting services — AI question generation and marking, email delivery, sign-in/authentication, and any feedback attachments you upload — run on servers in the United States. While information is there, it may be accessible to law enforcement or national-security authorities under United States law.

A full list of our service providers is available on request at privacy@homeworkhub.app.

6. Parental Consent

Homework Hub is designed for use by children under the supervision of their parent or guardian. Before any child profile or homework data can be created, the parent must:

• Read this Privacy Policy and our Terms of Service.
• Actively check a consent checkbox confirming they are the parent or legal guardian.
• Complete registration with a valid email address.

We record the timestamp of consent. No child data is collected until this step is complete.

Parents may withdraw consent at any time by requesting account deletion (see Section 8).

7. Data Retention

• Active accounts: Data is retained while the account is active.
• Trial families who don't subscribe: We pause the account rather than delete it, so your children's progress is waiting if you return. You can permanently delete it yourself at any time (Section 8). Accounts inactive for an extended period may be deleted after email notice to you.
• Deleted accounts: Data is permanently deleted within 30 days of a deletion request.

8. Your Rights & Data Deletion

Depending on your jurisdiction, you have rights including:

• Access — request a copy of the data we hold about your family.
• Correction — ask us to correct inaccurate information.
• Deletion — request that we permanently delete your family's account and all associated data.
• Withdrawal of consent — withdraw parental consent at any time.

9. Data Security

• All data is transmitted over HTTPS.
• Passwords are never stored in plain text — credential storage is handled by our cloud provider's managed authentication service.
• Each family's data is isolated: one family cannot access another family's data by design (enforced at the database level, not just the UI).
• API keys for third-party services are stored in server-side secret management and never exposed to the browser.
• The codebase undergoes internal security review, covering access control, dependencies, and infrastructure configuration.
• In the event of a data breach affecting your personal information, we will notify you by email as required by Canadian law (PIPEDA).

9a. Security logging

To protect accounts, we keep server-side security logs:

• Security events — records of protective actions, such as repeated password-reset requests being throttled or a cancelled credential being refused. These entries contain internal account identifiers and hashed technical keys only — never email addresses, passwords, PINs, or children's names.
• Sign-in attempts — our cloud provider records authentication attempts (successful and failed), including the IP address and time of each attempt. We use these records solely to detect and investigate unauthorized access to accounts — for example, someone repeatedly guessing passwords. They are never used for advertising, marketing, or analytics, are kept separate from your family's account data, and are automatically deleted after a limited period (currently 30 days).

10. Children's Privacy

• Children do not interact with the account creation, login, or settings — only parents do.
• Children's profiles use first names or aliases only — we recommend aliases over legal names.
• We do not serve advertising to children.
• We do not share children's data with third parties for commercial purposes.
• We do not allow children to share data publicly.
• AI-generated content is designed to be age-appropriate and educational, with safety instructions built into how questions are generated.

11. Cookies & Website Measurement

This section applies to our public marketing pages only — the pages you can visit without signing in (like our homepage, this page, and our Terms). It never applies inside the app your child uses or your parent dashboard: there are no analytics or advertising cookies on those surfaces.

Strictly necessary

A session token in your browser's local storage keeps you signed in, and one small record stores your cookie choices. These are required for the site to work and are not shared with third parties.

Optional — only with your consent

On our marketing pages we ask, via a cookie banner, whether you allow:

• Analytics cookies — help us understand how visitors use our marketing pages (which sections are read, where people drop off). Analytics identifiers are retained for a limited period (currently up to 14 months).
• Advertising cookies — set by the advertising platforms we run campaigns on, to measure whether our ads led to a signup.

Neither category is set before you consent, neither is ever linked to your child's learning data, and you can change your choices at any time via the "Cookie settings" link in the footer of our marketing pages. Declining optional cookies never limits your use of Homework Hub.

12. Changes to This Policy

We may update this policy as the service evolves. If we make material changes, we will notify registered parents by email in advance of the changes taking effect. Continued use after the effective date constitutes acceptance of the updated policy.

13. Canadian Residents

Some Canadian provinces have their own private-sector privacy laws. We apply the same rights and practices described in this policy to all Canadian residents, regardless of province.

14. Contact

For any privacy questions, access requests, or deletion requests:

Email: privacy@homeworkhub.app

We aim to respond promptly to all enquiries.